MCP security report

api.bowmark.ai

D55/100
Security grade DA few things are worth a closer look before connecting.
Connected ✓4 tools scanned

https://api.bowmark.ai/mcp/registry

mediumrun
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Default opt-in (opt-out pattern) for marketing email
When an email is provided, the `newsletter` parameter defaults to `true`, meaning the user is automatically subscribed to marketing/changelog email unless the agent explicitly sets it to `false`. This is a dark-pattern default (opt-out rather than opt-in) for using a user's personal contact information for marketing purposes. While the tool description does instruct the agent to disclose this to the user, the underlying default still relies on the agent remembering to ask/decline on the user's behalf rather than requiring affirmative consent to subscribe, which could result in the user's email being enrolled in marketing communications without truly informed consent if the agent's disclosure step is skipped or the user's answer is ambiguous.
lowget_library
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowrun
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
Embed this badge

Show your MCP server’s security grade

MCP security grade D

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/eac6776d-cc8c-4a9b-bba4-8e76047ca5b4)](https://gateturbo.com/report/eac6776d-cc8c-4a9b-bba4-8e76047ca5b4)

Scanned 9/7/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free